Privacy policy

Data controller

[to be completed], [to be completed], [to be completed]. Contact for your data: [email protected].

Data we collect

DJ account: email address, password (stored hashed, never in plain text), plan, date you accepted the terms.

Usage: download history, playlists, public DJ profile if you create one.

Security and quotas: IP address, used to count free downloads and limit abuse.

Payment: handled by Stripe, which receives your card details and billing address. We only receive the customer ID and subscription status.

Artists: public SoundCloud profile (name, ID) when signing in, uploaded masters and time-stamped consents.

Messages: the content of emails you send us.

Purposes and legal bases

Providing the service and managing your subscription (contract); invoicing and accounting (legal obligation); security, fraud prevention and protecting artists' rights (legitimate interest). We do not use your data for advertising and never sell it.

Retention

Account: while active, then deleted after 3 years without sign-in. IP-based quotas: 12 months maximum. Invoices: legal accounting period (up to 10 years). Password reset links: 1 hour. Artist consents: while the track is available plus 5 years, as evidence.

Recipients and processors

Hosting provider ([to be completed]), Stripe (payments), SoundCloud (artist sign-in and track checks), our email delivery service. Some may process data outside the European Union; such transfers rely on the European Commission's standard contractual clauses.

Cookies and local storage

We only use cookies required for the site to work: sp_user (DJ session), sp_artist and sp_oauth (artist sign-in), sp_admin (administration), lang (chosen language). The light or dark theme is stored in your browser. No advertising or third-party analytics cookies, so no consent banner is needed.

Your rights

You can access, correct, export ("Export my data" in My account) and delete ("Delete my account") your data, object to processing or ask for it to be restricted.

For any request: [email protected]. We reply within one month. You may also contact your country's data protection authority.

Security

Encrypted connection (HTTPS), passwords hashed with scrypt, signed cookies, protected admin access, regular backups.